Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          GJX4L3ns+iLapPfZnf25SZyzEudoVCB9AJ4pB0JkC7c=
Subject key identifier:   18:37:67:3B:58:C3:D9:89:19:40:56:4B:03:11:31:DF:BF:12:4B:5F
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       01974A7A790978CB4EB42F4782A1AF3B9594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          15A4
Signing time:             Sat 07 Jun 2025 13:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:29 +0000
Files and hashes:         1: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: shpcbpc5xPrmurp6FHx/UUCTTA6RJ+2P4F3ya7AtH60=)
                          2: K3O0AE3ipMAixLfcc54vqisf9Lk.roa (hash: 39lhfBxsDOQl4+NOlD/26yVUVPea0hcXtUuz/K2/lnU=)
                          3: Ny5zIYdEORHoaktmzqBhJlg15eU.roa (hash: 8s/IpUQd16S/jbNe07o2oL6oFrvSy6sNUQREu4sn1Ns=)
                          4: WzdGPQt0K3kv2z4Btb0EfRMIuaA.roa (hash: 2ZynSAwhPESiBjw3zy7TtsDlnhrlCAImarD99QQG4xg=)
                          5: bbcQM14_wibjboqxlb73XNgGNuk.roa (hash: S8JvppRiDYyzxf9tLizafl4kxpltI7FSoBpu/hZzQ/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:79:09:78:cb:4e:b4:2f:47:82:a1:af:3b:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jun  7 13:00:29 2025 GMT
            Not After : Jun  8 13:00:29 2025 GMT
        Subject: CN=1837673b58c3d9891940564b031131dfbf124b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:19:b1:14:ce:d0:50:3c:9b:be:9b:6b:60:
                    90:da:60:d8:98:73:36:72:4f:05:0b:56:e6:71:c3:
                    5a:7f:a6:90:9a:e0:9f:d2:d5:e7:f3:6d:92:4a:ee:
                    e8:3b:9c:e5:91:9e:e0:c8:75:a1:40:ad:c3:ab:a6:
                    bc:ac:ef:a2:80:af:53:14:31:e7:1f:34:a4:b9:f4:
                    7d:7d:9a:db:dd:3a:34:7c:33:42:ec:6b:70:6e:eb:
                    9a:8c:92:e1:7e:8b:3c:0b:28:89:fe:7a:bb:9f:ed:
                    69:ef:9b:a0:9b:9c:f6:6e:20:bd:be:eb:70:17:06:
                    b7:32:e3:d1:88:73:5c:58:35:61:3a:5e:e6:e1:aa:
                    1e:c0:67:74:68:8a:7e:aa:37:88:62:81:30:92:ea:
                    96:cb:e8:23:95:c1:36:2b:3d:37:46:1d:78:5b:3e:
                    20:d3:0b:84:d2:e0:7f:f3:74:28:db:17:83:b8:0f:
                    1d:54:7c:07:d5:fa:9c:7d:3d:58:7d:9e:27:ea:5c:
                    91:6b:9f:4c:fc:8d:97:ae:60:40:d1:8a:4d:ab:5d:
                    56:60:dc:e6:d7:13:07:6b:5f:89:9a:98:b2:8b:7a:
                    27:5a:c1:98:95:6a:e3:29:b2:78:f7:e2:9d:ae:de:
                    d5:03:98:90:33:62:51:9f:e4:6a:64:65:b8:6e:bb:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:37:67:3B:58:C3:D9:89:19:40:56:4B:03:11:31:DF:BF:12:4B:5F
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:84:01:74:e0:50:d3:2c:85:88:b2:65:d3:77:5b:51:28:51:
         5a:fa:05:42:ca:d2:5f:8a:a2:43:1e:43:86:dd:9e:c4:c0:21:
         e0:71:76:00:4a:0a:c9:9d:da:d5:40:85:79:3d:b5:88:3e:c2:
         59:a4:bb:84:06:fa:3b:f5:e7:f9:82:3f:af:bf:c7:38:0a:64:
         26:0e:d7:76:db:6c:ed:13:89:d6:36:a8:f9:20:88:57:cf:ee:
         65:2f:be:20:e6:58:4e:76:7c:7a:27:1e:98:8f:c0:5a:fe:6b:
         bc:c9:34:91:c0:0b:cf:ce:87:1c:71:95:7b:e5:8e:1f:12:6e:
         b5:27:96:35:89:ac:bc:48:3b:dd:72:f6:b8:1b:ce:42:a4:d3:
         93:b1:e4:94:f6:04:5d:d3:e3:32:a1:81:1b:d7:90:24:43:a8:
         c1:9f:32:2f:60:9c:89:1e:1b:30:15:af:1a:99:f9:b0:c9:a0:
         ff:92:30:55:40:c0:5d:6b:a2:96:81:dd:58:8e:5b:8d:c7:3f:
         57:7a:41:fe:93:70:4a:8b:7e:09:e9:df:2e:22:97:7c:39:e0:
         47:a0:c6:c7:89:7b:07:97:aa:06:f7:ba:b2:92:ee:d0:b3:08:
         c6:a2:a8:fa:21:5e:7c:a1:46:bb:82:0c:50:95:f1:68:a5:a7:
         5e:3c:f9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKenkJeMtOtC9HgqGvO5WUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz
ZmFhYmYwHhcNMjUwNjA3MTMwMDI5WhcNMjUwNjA4MTMwMDI5WjAzMTEwLwYDVQQD
EygxODM3NjczYjU4YzNkOTg5MTk0MDU2NGIwMzExMzFkZmJmMTI0YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y8ZsRTO0FA8m76ba2CQ2mDYmHM2
ck8FC1bmccNaf6aQmuCf0tXn822SSu7oO5zlkZ7gyHWhQK3Dq6a8rO+igK9TFDHn
HzSkufR9fZrb3To0fDNC7GtwbuuajJLhfos8CyiJ/nq7n+1p75ugm5z2biC9vutw
Fwa3MuPRiHNcWDVhOl7m4aoewGd0aIp+qjeIYoEwkuqWy+gjlcE2Kz03Rh14Wz4g
0wuE0uB/83Qo2xeDuA8dVHwH1fqcfT1YfZ4n6lyRa59M/I2XrmBA0YpNq11WYNzm
1xMHa1+Jmpiyi3onWsGYlWrjKbJ49+Kdrt7VA5iQM2JRn+RqZGW4bruM+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg3ZztYw9mJGUBWSwMRMd+/EktfMB8GA1UdIwQY
MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt
M2JkMTk3OGJmMmY2LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2
LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoQBdOBQ
0yyFiLJl03dbUShRWvoFQsrSX4qiQx5Dht2exMAh4HF2AEoKyZ3a1UCFeT21iD7C
WaS7hAb6O/Xn+YI/r7/HOApkJg7Xdtts7ROJ1jao+SCIV8/uZS++IOZYTnZ8eice
mI/AWv5rvMk0kcALz86HHHGVe+WOHxJutSeWNYmsvEg73XL2uBvOQqTTk7HklPYE
XdPjMqGBG9eQJEOowZ8yL2CciR4bMBWvGpn5sMmg/5IwVUDAXWuiloHdWI5bjcc/
V3pB/pNwSot+CenfLiKXfDngR6DGx4l7B5eqBve6spLu0LMIxqKo+iFefKFGu4IM
UJXxaKWnXjz5nA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:09 2025 by rpki-client